Adrotate Security Vulnerabilities and Issues — Adrotate CVE List

Lucene search

Adrotate ProjectAdrotate

2 matches found

CVE•added 2022/03/07 9:15 a.m.•194 views

CVE-2022-0267

The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection

7.2CVSS7.2AI score0.00588EPSS

CVE•added 2021/03/18 3:15 p.m.•47 views

CVE-2021-24138

Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user.

5.5CVSS5.8AI score0.00806EPSS